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Description 

[0001] The present invention relates to a self-serv- 
ice business system. 

[0002] Fraudulent use of self -service business sys- s 
terns such as automated teller machine (ATM) systems 
has become a substantial problem for banks and other 
finandal institutions. Customer complaints have been 
received that "phantom withdrawals" have been made 
from their accounts by persons passing themselves off io 
as the customers. 

[0003] In an attennpt to reduce the likelihood of 
fraud occurring, it is known to use biometrics for confir- 
mation of user identity in a self-service system. Biomet- 
rics relates to the analysis of biological observations 75 
and phenomena. More particularly, in the present con- 
text, it relates to the measurement and evaluation of 
certain physical characteristics which vary from person 
to person. Biometric identification systems have been . 
developed and are in use today. The publication "Elec- 20 
tronic Banking r, published by "POST-NEWS". Stoke- 
sub-Hamdon, Somerset TA1 4 6BR England, discusses 
the use of biometrics in connection with electronic bank- 
ing and identifies five types of biometric identification: 
signature verification, hand geometry, finger and palm 25 
print comparison, voiceprint measurement and retinal . 
or iris eye scanning. A sixth type, vein patterns, is iden- 
tified as having recently been designed. When a bio- 
metric assessment is made, a value Is calculated for 
each user. This value is compared with a predefined ref- so 
erence value to decide whether to accept or reject a 
user. The use of biometrics to confirm the identity of a 
user is not always completely accurate. Because of the 
limitations of the technique, there is always a false 
acceptance rate and a false reject rate. Even though 35 
these rates usually lie within the range of 0.1% and 3%, 
depending upon the biometric used, this can still be 
unacceptable for banks. 

[0004] GB-A-2,237.670 discloses a system for the 
transfer of value for use in a situation where a user 40 
wishes to receive the services or goods from a supplier 
in return for an appropriate transfer of funds or a com- 
mitment to recognize the value of the services/goods 
supplied. This system comprises a user interface unrt 
having user identification input means, biometric means 4s 
for producing biometric output data relating to a user, 
storage means for storing biometric reference data 
relating to an authorised of the system and is also 
arranged such that data relating to previous transac- 
tions initiated by the authorised user can be stored so so 
that the likely type of transaction to be requested by a 
given user can be protected having regard to the past 
request history of that user. 

[0005] Accordingly, it is an object of the present 
invention to provide a self-service system having an 55 
improved capability of detecting attempted fraud. 
[0006] According to the invention there is provided 
a self-service system including a user interface unit hav- 



ing user identification means, input means operable by 
a user for initiating a selected self-service transaction, 
biometric means for producing biometric output data 
relating to a user, storage means for storing biometric 
reference data relating to a plurality of authorised users 
of the system and arranged to store data relating to pre- 
vious transactions initiated by said authorised users, 
prediction means coupled to said identification means 
and arranged to predict the type of transaction to be 
requested by a given user on the basis of the stored 
data relating to previous transactions, transaction 
authorisation means coupled to said biometric means 
and to said prediction means and arranged to make a 
determination as to whether a transaction initiated by a 
user is to be permitted to proceed to completion, char- 
acterized in that said determination is made on the 
basis that if said biometric output data does not conclu- 
sively match said biometric reference data but matches 
said reference data within a predetermined limit of dis- 
aepancy the comparison between the predicted and 
requested transaction is used in determining whether 
the transaction is permitted to proceed to connpletion, 
and by the system including further storage means 
arranged to store a suspicion count for each of said 
authorised users, each suspicion count being arranged 
to be incremented by one each time said biometric out- 
put data for the relevant user is not a conclusive match 
with said biometric reference data for that user and 
regardless of the result of the comparison between the 
predicted and requested transaction, and said transac- 
tion authorisation mens being arranged to terminate a 
transaction if said suspicion count reaches a predeter- 
mined threshold value. 

[0007] It should be understood that, in a self-serv- 
ice system in accordance with the present invention, if a 
biometric lest is not conclusive, use of the prediction 
means can be helpful in resolving the identity of the 
user. The prediction means involves the use of a predic- 
tion to determine whether or not a proposed transaction 
is consistent with the user's normal behaviour in decid- 
ing whether to permit the transaction to proceed. A 
record of past transactions for each user is maintained 
and stored in a memory in the system. When a user 
commences a transaction, the system can predict what 
type of transaction the user is likely to request. In the 
case in which the biometric evaluation is questionable, 
the added information with respect to whether the type 
of transaction selected by the user is consistent with 
past actions can tip the scales for or against user 
acceptance. 

[0008] Another factor which can be employed in 
determining whether a requested transaction may pro- 
ceed to completion is a suspicion count. H a predetier- 
mined number of consecutive suspicious transactions 
involving a particular user have taken place, this can be 
determinative of user rejection in close cases. A suspi- 
cion count for each user is maintained in memory and is 
incremented for each suspidous transaction. The count 
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is deaemented to a start value (e.g. zero) whenever a 
non-suspicious transaction involving that user takes 
place. 

[0009] One embodiment of the invention will now be 
desatbed by way of example with reference to the 
accompanying drawings, in which:- 

Rg. 1 is a block diagram of a self-service system in 
accordance with the Invention Incorporating a plu- 
rality of ATMs; 

Rg. 2 is a schematic diagram of one of the ATMs of 
Rg. 1 : and 

Rg. 3 is a flow diagram illustrating the operation of 
the transaction authorisation means of the system. 

[0010] ^ Referring to Rgs. 1 and 2, the self-service 
business system shown therein includes a plurality of 
ATMs 10 connected in conventional manner to a host 
computer 12. As shown In Fig. 2, each ATM 10 includes 
a conventional user interface unit or fascia 14 incorpo- 
rating key operated input means 16 for enabling a user 
of the ATM 10 to enter, if required, a personal identifica- 
tion number (PIN) and to select desired services pro- 
vided by the ATM 10, a lead-through display screen 18 
for indicating to the user the options available to him in 
carrying out a transaction on the ATM 10 and for indicat- 
ing the keys of the input means 16 which require to be 
operated in order to select a desired service or services, 
and a card reader 20 for reading account information 
contained on an identification card which the user 
inserts in operation into a slot (not shown) forming part 
of the card reader 20 whereby the user can be identi- 
fied. Other conventional modules included in each ATM 
10 include a cash dispenser 22 for counting and pre- 
senting currency notes to a user, a receipt printer 24 for 
printing receipts to be presented to a user when a 
deposit or cash withdrawal is made using the ATM 10 
and for printing a mini-statement or balance of account 
statement when requested by a user, a journal printer 
26 for printing a record of transactions carried out by the 
ATM 10, a depository 28 for receiving envelopes con- 
taining cash and/or cheques deposited by a user, envi- 
ronmental data source means 30 for providing data as 
to the time and date of a transaction together witii the 
location of the ATM 10, processing means 32 fa con- 
trolling tiie operations of the various elements of the 
ATM 10, and a communications module 34 for coupling 
the ATM 10 to the host computer 12. 
[001 1 ] The host computer 1 2 includes a user refer- 
ence file 36 which includes records of the types of trans- 
actions performed by authorised users in previous uses 
of the system which includes the various ATMs 10, envi- 
ronmental data relating to these transactions, artd bio- 
metric reference data for each authorised user. 
[0012] Also included in each ATM 10 is a predictive 
system 38 which is arranged to use the information con- 
tained in the user reference file 36 for a particular user 
to ascertain what service or services have been 



requested most frequently by that user at particular 
times, dates and locations in tiie past, and therefore 
what service or sen/ices are most likely to be requested 
by that user when he next initiates a transaction by 

5 inserting his identification card into the card reader 20 of 
one of the ATMs 10. The processing means 32 of each 
ATM 10 acts in dependence on the output of the predic- 
tive system 38 to cause the ATM 10 to perform certain 
operations at certain times and in certain sequences in 

70 order to cause the ATM 10 to complete a transaction 
with greater overall speed, and to simplify the decisions 
and selections which need to be made by the user, if the 
service or services actually requested is or are the 
same as the service, or at least some of the services, 

75 which have been predicted. Thus, the processing 
means 32 causes a particular menu to be displayed on 
the lead -through display screen 1 8 following initiation of 
a transaction by a user and following a prediction that 
particular services are likely to be requested by the 

20 user. For example, a simplified menu could be displayed 
consisting of only four questions, such as: "Do you 
require £20?", "Do you require £30?", "Do you require a 
mini-statement?", and "Do you require some otiier 
transaction?". Also, immediately following the initiation 

25 of a transaction, the ATM 10 could obtain system 
authorization for, and count out ready for presenting to 
the owner, a predicted amount of cash in advance of an 
anticipated witi^drawal request. If, for example, a with- 
drawal request is predicted to be either £20 or £30, then 

30 £20 will be counted out since, if £30 is actually 
requested, a further $10 can readily be counted and 
added to the already counted amount 
[0013] Also included in the user interface unit 14 of 
each ATM 10 is a biometric means 40 which receives 

35 one or more biometric inputs from a user who is 
addressing the ATM 10. As has previously been set 
forth, the biometric information required may include 
one or more of several types, such as, for example, sig- 
nature verification, hand geometry finger and palm print 

40 comparison, voiceprint measurement, retinal or iris eye 
scanning or vein pattern determination. The particular 
input apparatus will vary in accordance with the particu- 
lar biometric employed. For example, for voiceprint 
measurement, a microphone would customarily be 

45 used; for signature verification, a pressure-sensitive 
writing platform might be employed; for hand geometry 
a platform on which the customer's hand is placed and 
sensed could be used, etc. Output data from the bio- 
metric means 40 is compared with the biometric refer- 
so ence data on file in tiie user reference file 36. As a result 
of this comparison, a first value is derived representa- 
tive of the difference between the output data and the 
reference data. The output data is considered to be a 
conclusive match with the reference data if tin e first 

55 value is less than a predetermined threshold value, 
[0014] Included in storage in a memory unit 42 of 
the host computer 12 is a suspicion count. This is a 
count of the number of consecutive suspicious transac- 
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tions performed by a user. A suspicious transaction is 
one in which output data from the biometric means 40 
fails to match conclusively the reference biometric data • 
for the relevant user but lies within a predetermined limit 
of discrepancy. Each time that a suspicious transaction 5 
takes place, the total of the suspicion count is incre- 
mented by one. On the other hand, when a non-suspi- 
cious transaction is completed by a user, the suspicion 
count is decremented to zero. A suspicion count thresh- 
old number, either for a particular user or for all users, w 
may be determined and stored in the host computer 12. 
for example in the user reference file 36. 
[0015] Also included in each ATM 10 is a transac- 
tion authorisation module 44, which is a software mod- 
ule that is Integrated into the processing means 32 is 
which controls the operation of the ATM 10. the module 
44 serving to authorise a transaction selected by a user. 
The inputs to the transaction authorisation module 44 
are as follows: the predicted transaction; the actual 
requested transaction; the biometric value for the user; 20 
the biometric reference value; and any previously 
recorded suspicion count. The outputs from the transac- 
tion authorisation module 44 are: OK, meaning that the 
identity of the laser has been confirmed and that the 
user can proceed with the transaction; failed, meaning zs 
that the biometric test has not confirmed the identity of 
the user as read from his identification card, thereby 
implying that an attenpted fraud is taking place; and 
suspicious, meaning that the module 44 cannot be 
1 00% sure either way In the last instance, the suspicion 30 
count in the memory unit 42 is incremented by one, so 
that the system is aware of a possible attempted fraud. 
It should be understood that if the suspicion count 
reaches a predetermined threshold value (typically 3) 
then the module 44 terminates the transaction. 35 
[0016] The operation of the self-service system, 
particularly as regards the transaction authorisation 
process, will now be described with reference to Rg. 3. 
A transaction is initiated (block 50) by a user inserting 
his identification card into the card reader 20 of one of 40 
the ATMs 10. After a transaction is initiated, a biometric 
check of the user is made (block 52), and simultane- 
ously a prediction is made (block 54) as to the service or 
services that will probably be requested by the user. At 
the same time, a suspicion count, if there is one for that 45 
user, is forwarded by a path 56 to the transaction 
authorisation module 44. The user then makes an 
actual transaction selection (block 58). All of the infor- 
mation from these actions is input to the module 44, as 
represented by a biometric reference path 60, a biomet- so 
rlc value path 62, the suspicion count path 56, a pre- 
dicted transaction path 64 and an actual transaction 
path 66. The module 44 then processes all of this infor- 
mation and provides a decision. The various alterna- 
tives are represented in Fig. 3 by paths 68, 70 and 72, ss 
shown as outputs from the module 44, which lead to 
blocks 74, 76 and 78, respectively. 
[0017] It should be understood that if the biometric 



value is a conclusive match with the reference value 
then the transaction continues (block 76) regardless of 
whether the actual transaction is as predicted. 
[0018] Also, if the biometric value dearly fails, then 
the transaction is found not to be valid by the module 44 
regardless of whether the actual transaction is as pre- 
dicted. In this case the transaction is terminated (block 
78) and the suspicion count is incremented. Another 
option in the case of an invalid transaction Is to arrange 
for the relevant ATM 10 to capture the user's identifica- 
tion card. 

[001 9] If the biometric value is close to the biometric 
reference value (i-©- »s not a conclusive match but 
matches the reference value within a predetermined 
limit of discrepancy) and the actual transaction is as 
predicted, then the module 44 increments the suspicion 
count and permits the transaction to proceed to comple- 
tion provided that the suspicion count has not reached 
the threshold value. If the biometric value is close to the 
reference value but the actual transaction is not as pre- 
dicted, the suspicion count is incremented and appro- 
priate further action is taken (block 74) to handle a 
suspicious transaction, again provided that the suspi- 
cion count has not reached the threshold value. This 
further action may involve repeating the biometric 
check, making a different biometric check or requiring 
the user to enter his PIN on the ATM input means 16. If 
the further biometric check is conclusive or the entered 
PIN is correct then the transaction is allowed to pro- 
ceed. On the other hand, if the further biometric check 
is not conclusive or the PIN is incorrect then the trans- 
action is terminated. 

[0020] In an alternative embodiment of a self-serv- 
ice system in accordance with the invention, instead of 
storing a user reference file in the host computer 12, a 
data base containing a record of a user's previous trans- 
actions and biometric reference data could be stored in 
the identification card for that user, this data being read 
out at the same time as the identification data for the 
user. Also, the suspicion count for the user could be 
stored in the identification card. 

Claims 

1 . A self-service system including a user interface unit 
(14) having user identification means (20), input 
means (16) operable by a user for initiating a 
selected self-service transaction, biometric means 
(40) for producing biometric output data relating to 
a user, storage means (36) for storing biometric ref- 
erence data relating to a plurality of authorised 
users of the system and arranged to store data 
relating to previous transactions initiated by said 
authorised users, prediction means (38) coupled to 
said identification means (20) and arranged to pre- 
dict the type of transaction to be requested by a 
given user on the basis of the stored data relating to 
previous transactions, transaction authorisation 
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means (44) coupled to said biometric means (AO) 
and to said prediction means (38) and arranged to 
make a determination as to whether a transaction 
initiated by a user is to be permitted to proceed to 
completion, characterized in that said determina- $ 
tion is nr^de on the basis that If said biometric out- 
put data does not conclusively match said biometric 
reference data but matches said reference data 
within a predetermined limit of discrepancy the 
comparison between the predicted and requested w 
transaction is used in determining whether the 
transaction is permitted to proceed to completion, 
and by the system including further storage means 
(42) arranged to store a suspicion count for each of 
said authorised users, each suspicion count being 75 
arranged to be incremented by one each time said 
biometric output data for the relevant user is not a 
conclusive match with said biometric reference 
data for that user and regardless of the result of the 
comparison between the predicted and requested 20 
transaction, and said transaction authorisation 
mens (44) being arranged to terminate a transac- 
tion if said suspicion count reaches a predeter- 
mined threshold value. 

25 

2. A system according to Claim 1, characterized in 
that said transaction authorisation means (44) is 
arranged to allow a transaction to proceed if said 
biometric output data conclusively matches said 
biometric reference data, regardless of the compar- 30 
tson between the predicted and requested transac- 
tion. 

3. A system according to Claim 2. characterized in 
that a first value is derived representative of the dif- ss 
ference between said biometric output data and 
said biometric reference data, said output data 
being considered to be a conclusive match with 
said reference data if said first value is less than a 
predetermined threshold value. 40 

4. A system according to either Claim 2 or Claim 3. 
characterized in that, if said biometric output data 
does not conclusively match said biometric refer- 
ence data but does match said reference data 45 
within said predetermined limit, and said requested 
transaction is not consistent with said predicted 
transaction, said transaction authorisation means 
(44) is arranged to cause said system to obtain 
additional information concerning the relevant user so 
before a final determination is made as to whether 
the transaction is permitted to proceed to comple- 
tion, 

5. A system according to Claim 4, characterized In ss 
that in the course of a transaction a further use is 
nrade of said biometric means (40) to provide said 
additional information. 



6. A system according to Claim 4. characterized in 
that in the course of a transaction the user enters a 
personal identification number by means of said 
input means (16) to provide said additional informa- 
tion. 

7. A system according to any one of the preceding 
claims, characterized in that said user Identification 
means (20) is formed by a card reader for reading 
from a card account inforn^tion relating to a user. 

8. A system according to any one of the preceding 
claims, characterized in that the stored data relating 
to previous transactions is updated each time a 
transaction is initiated by one of said authorised 
users. 

9. A system according to any one of the preceding 
claims, characterized by a host computer (1 2) and a 
pluralrty of automated teller machines (10) each 
including a user interface unit (14), . prediction, 
means (38) and authorisation means (44) as spec- 
ified in Claim 1. 

Patentanspruche 

1. Ein Selbstbedienungssystem mit einer Benutzer- 
Interface-Einheit (14), mit einer Benutzer-ldentifi- 
zierungs-Einrichtung (20), einer Eingabeeinheit 
(16), die von einem Benutzer zur Einleitung einer 
ausgewahlten Selbstbedtenungstransaktion betd- 
tigbar 1st, einer biometrischen Einrichtung (40) zur 
Erzeugung von benutzerbezogenen biometrischen 
Ausgangsdaten, einer Speichereinrichtung (35) zur 
Speicherung btometrischer Referenzdaten bezOg- 
lich einer Mehrzahl autorisierter Benutzer des 
Systems und Speicherung von Daten bezuglich fru- 
herer Transaktionen, welch e von den autorisierten 
Benutzern eingeleitet wurden, einer mit der Identrfi- 
zierungseinrichtung (20) gekoppelten Vorhersage- 
Einrichtung (38) zur Vorhersage der von einem 
bestimmten Benutzer angefaderten Transaktions- 
art auf Grundlage gespeicherter Daten Ober 
zuriicWiegende Transaktionen, einer mit der biome- 
trischen Einrichtung (40) und der Vorhersage-Ein- 
richtung (38) gekoppelten Transaktions- 
Autorisierungseinrichtung (44), welche eine Ent- 
scheidung daruber trifft. ob eine von einem Benut- 
zer eingeieitete Transaktion zu Ende gefOhrt 
werden darf. dadurch gekennzeichnet, da3 diese 
Bestimmung auf der Grundlage erfolgt, daR im 
Falle einer nichtschlQssigen Obereinstimmung der 
biometrischen Ausgangsdaten mit den biometri- 
schen Referenzdaten, jedoch eine Obereinstim- 
mung mit den Referenzdaten innerhalb einer 
vorbestimmten Diskrepanzgrenze der Vergleich 
zwischen der vorhergesagten und der angeforder- 
ten Transaktion benutzt wird, um zu bestimmen, ob 
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die Transaktion fertig durchgefuhrt werden dart, 
und da3das Syslem weiterhin eine Speicheranord- 
nung (42) enthait, urn fur jeden der autorisierten 
Benutzer einen Verdachtszahlwert zu speichern. 
welcher jedesmal um 1 erhOht wird, wenn die bio- 5 
metrischen Ausgangsdaten des betreffenden 
Benutzers nicht schlOssig mit den biometrischen 
Referenzdaten fur diesen Benutzer ubereinstim- 
men, und zwar unabhangig vom Ergebnis des Ver- 
gleichs zwischen der vorhergesagten und der yo 
angeforderten Transaktion, und daB die Transakt- 
ions-Autoristerungseinrichtung (44) die Transaktion 
abbricht, wenn der Verdachtszahlwert einen vorbe- 
stimmten Schwellwert ubersteigt. 

15 

2. System nach Anspruch 1, dadurch gekenn- 
zeichnet. da 3 die Transaktions-Autorisierungsein- 
richtung (44) unabhangig vom Vergleich zwischen 
vorhergesagter und angeforderter Transaktion eine 
Fortsetzung der Transaktion erlaii)t, wenn die bio- 20 
metrischen Ausgangsdaten schfusstg mit den bio- 
metrischen Referenzdaten Qbereinstimmen, 

3. System nach Anspruch 2, dadurch gekenn- 
zeichnet. daB ein erster Wert abgeleitet wird, der 25 
die Differenz zwischen den biometrischen Aus- 
gangsdaten und den biometrischen Referenzdaten 
darsteilt und da3 die Ausgangsdaten als schlOsslg 
ubereinstimmend mit den Referenzdaten angese- 
hen werden. wenn der erste Wert Weiner als ein 30 
vorbestimmter Schwellwert ist. 

4. System nach Anspruch 2 Oder 3, dadurch g ekenn- 
zeichnet, daf3 dann, wenn die biometrischen Aus- 
gangsdaten nicht schlussig mit den biometrischen 3S 
Referenzdaten Obereinstimmen, jedoch eine Uber- 
einstimmung mit den Referenzdaten innerhalb 
einer vorbestimmten Grenze vorliegt. und wenn die 
angeforderte Transaktion nicht konsistent mit der 
vorhergesagten Transaktion ist, die Transaktions- 40 
Autorisierungseinrichtung (44) derart ausgeblldet 

ist, daB sie dem System eine zusatzliche Informa- 
tion bezuglich des betreffenden Benutzers zukom- 
men laBt, ehe eine endgOltige Entscheidung 
darOber getroffen wird, ob die Fortsetzung der 45 
Transaktion eriaubt wird. 

5. System nach Anspruch 4, dadurch gekenn- 
zeichnet, da3 im Verlauf einer Transaktion die bio- 
metrische Einrichtung (40) zur Lieferung so 
zusatzlicher Information dient. 

6. System nach Anspruch 4. dadurch gekenn- 
zeichnet, daB im Verlauf einer Transkation der 
Benutzer uber die Eingabeeinhchtung (16) eine ss 
persOnliche Identifikationsnummer zur Lieferung 
der zusatzlichen Information eingibt. 



7. System nach einem der vorstehenden Anspruche, 
dadurch gekennzelchnet, daB die Benutzer- Iden- 
tifizierungseinrichtung (20) durch einen Kartenleser 
gebildet wird, der von einer Karte eine benutzerbe- 
zogene Kontoinformation abliest 

8. System nach einem der vorstehenden AnsprOche. 
dadurch gekennzelchnet, daB die gespeicherten 
Daten bezuglich zurOckliegender Transaktionen 
jedesmal aktualisiert werden, wenn eine Transak- 
tion von einem der autorisierten Benutzer eingelei- 
tetwird. 

9. System nach einem der vorstehenden Anspruche, 
gekennzelchnet durch einen Host-Computer (12) 
und eine Mehrzahl von Bankautomaten (10), deren 
jeder eine Benutzer-lnterface-Einheit (14), eine 
Vorhersage-Einrichtung (38) und eine Autorisie- 
rungseinrichtung (44) gemaB Anspruch 1 enthait. 

Revendlcatlons 

1, Un syst^me libre-service comportant une unit6 
interface utilisateur (1 4) ayant un moyen dldentifi- 
cation utilisateur (20), un moyen d*entr6e (16) ope- 
rable par un utilisateur pour d^clencher une 
transaction libre-sen/ice s6lectionn6e, un moyen 
biom^trique (40) pour produire des donn^es de 
sortie biom6triques relatives 6 un utilisateur. un 
moyen de m6n)orisation (36) pour m6moriser des 
donn^es de reference biom^trques relatives a une 
plurafit6 d'utilisateurs autoris^s du syst^me et 
arrange pour m6moriser des donn6es relatives k 
des transactions ant6rieures d6clench§es par les- 
dits utilisateurs autoris6s, un rroyen de prediction 
(38) accoupie audit moyen d'identification (20) et 
arrange pour predire le type de transaction suscep- 
tible d'etre demande par un utilisateur donn6 sur les 
bases des donnees memorisees relatives a des 
transactions anterteures, un moyen d'autprisation 
des transactions (44) accoupie audit moyen biome- 
trique (40) et audit moyen de prediction (38) et 
arrange pour determiner si Ton doit permettre a une 
transaction declenchee par un utilisateur d'etre 
menee a bien, caracterise en ce que ladite determi- 
nation est faite en partant du principe que si lesdi- 
tes donnees de sortie biometriques ne 
correspondent pas de fagon concluante auxdites 
donnees de reference biometriques mais con*es- 
pondent auxdites donn6es de reference dans une 
limite d'ecart predeterminee, la comparaison entre 
la transaction pr6dite et la transaction demandee 
est utilisee pour determiner si Ton permet a la tran- 
saction d'etre menee a bien, et par le systeme com- 
portant un autre moyen de memorisation (42) 
arrange pour m6moriser un compte des transac- 
tions suspectes pour chacun desdits utilisateurs 
autorises, chaque compte des transactions suspec- 
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tes 6tant arrange pour §tre incr6ment6 d'un k cha- 
que fois que lesdites donn^es de sortie 
biom^triques pour ruttlisateur approprid ne sent 
pas une correspondance conciuante avec lesdites 
donn^es de r^f 6rence biom^triques pour cet utilisa- 5 
teur et quel que soit le r^sultat de la comparaison 
entre la transaction pr^ite et la transaction deman- 
ds e. et I edit moyen d'autortsatlon des transactions 
(44) 6tant arrange pour mettre fin k une transaction 
si ledit compte des transactions suspectes atteint 70 
une valeur de seuil pr^6termin6e 

2. Un syst6me conform6ment k la revendication 1. 
caract6ris6 en ce que ledit moyen d'autorisation 
des transactions. (44) est arrang6 pour permettre k 15 
une transaction de se poursuivre si lesdites don- 
n6es de sortie biom6triques correpondent de fagbn 
conciuante avec lesdites donn^es de r6f6rence bio- 
m^triques. quelle que spit la comparaison entre la 
transaction pr6drte et la transaction demand^e. 20 

3. Un syst6me conform6ment k la revendication 2, 
caract^ris^ en ce qu*une premiere valeur est d§ri- 
v6e, representative de la difference entre lesdites 
donn^es de sortie biom^triques et lesdites don- zs 
n^es de reference biom^triques, lesdites donn^es 

de sortie etant consid6r6es §tre une correspon- 
dance conciuante avec lesdites donn^es de refe- 
rence si ladite premiere valeur est inf6rieure k une 
valeur de seuil pred6termin6e. 30 

4. Un systeme conform6ment k la revendication 2 ou 
k ta revendication 3. caracterise en ce que, si lesdi- 
tes donnees de sorties biometriques ne correspon- 
dent pas de fa9on conciuante avec lesdites 35 
donnees de reference biometriques mais corres- 
pondent avec lesdites donnees de reference dans 
ladite limite predeterminee, et que ladite transac- 
tion demand ee n'est pas en accord avec ladite tran- 
saction predite, ledit moyen d'autorisation des. 40 
transactions (44) est arrange pour faire en sorte 
que ledit systeme obtienne des inforn^tions sup- 
piementaires concernant Tutilisateur approprie 
avant qu'il ne soit determine defiriitivement si Ton 
permet k la transaction d'etre menee k bien. 45 

5. Un systeme conform6ment k la revendication 4, 
caracterise en ce que, au cours d'une transaction, 
une autre utilisation est faite dudit moyen biometri- 
que (40) pour fournir lesdites informations supple- $0 
mentaires. 

6*. Un systeme conformement k la revendication 4, 
caracterise en ce que. au cours d'une transaction, 
I'utilisateur entre un code personnel au moyen dudit ss 
moyen d'entree (16) pour fournir lesdites Informa- 
tions supplemental res. 



7. Un systeme conformement k I'une queiconque des 
revendications pr6cedentes, caracterise en ce que 
ledit moyen d'tdentification utilisateur (20) est forme 
par un lecteur de canes pour lire, k partir d'une 
carte, des informations relatives au compte d'un uti- 
lisateur. 

8. Un systeme conformement k Tune queiconque des 
revendications precedentes, caracterise en ce que 
les donnees memorisees relatives k des transac- 
tions anterieures sont mises k jour k chaque fois 
qu'une transaction est declench6e par I'un desdits 
utilisateurs autorises. 

9. Un systeme conformement k I'une queiconque des 
revendications pr6c6dentes, caracterise par un 
prdinateur central (12) et une pluralite de guichets 
automatiques bancaires (10), chacun comportant 
une unite interface utilisateur (14), un moyen de 
prediction (38) et un moyen d'autorisation (44) 
comme specif ie dans la revendication 1 . 



7 



EP 0 652 540 B1 



FIG. 1 



12 



HOST COMPUTER 



USER 
REFERENCE FILE 



36 



J 



SUSPICION 
COUNT 



42 



J 



ATM 



ATM 



ATM 



10 



7 10-/" 10 J 



ATM 



10 



FIG. 2 



COMMUNICATIONS MODULE 



18- 



10- 



PREDICTIVE 
SYSTEM 



ENVIRONMENTAL 
DATA SOURCE 



PROCESSING MEANS 



TRANSACTION 
AUTHORIZATION MODULE 



DEPOSITORY 



40- 
20- 

18- 
16- 



BIOMETRIC 
MEANS 



CARD READER 



LEAD - THROUGH 
DISPLAY 



INPUT MEANS 



JOURNAL 
PRINTER 



RECEIPT 
PRINTER 



CASH 
DISPENSER 



8 



EP 0 652 540 B1 



CO 

in 



in 







02: 


o 






o 


^ 


P<o 


EDI 




cc 




<<:uj 


CL 




ccco 









< 

CO 

< 

DC 



< 

O 
< 



Q 
LU 





9 



